Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: gmG+K2hRcEqxdyp0Ei6wrT2k5eLLYzvlTNadWr5A9aY=
Subject key identifier: A5:32:D3:FD:E5:13:A4:98:FC:54:0D:FB:3E:6C:D2:50:BB:DF:9C:2B
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 019D25F0F23B2B49DAFA506E7A1720160E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 14FE
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: 3955nhX_YEZJpLGNb2g2LYpM5qU.roa (hash: pZxjK106ITB9nYgUhk/h19PHoUNnxKmL0w73zZsgUK8=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: C2CPIgy/5IZzwF1ZcKeYLzXH7cBrOEbx3bCLaJ0z6wE=)
3: poagAtAcoxCnPFt4l6jTfhy6qxQ.roa (hash: V2w6VAYg+ftWTWTw3a35UkIw1YHIKQ1DFL1qj8G8cak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f2:3b:2b:49:da:fa:50:6e:7a:17:20:16:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=a532d3fde513a498fc540dfb3e6cd250bbdf9c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:6c:1e:f6:0f:b7:97:5a:bd:b2:93:d2:fd:
40:9e:de:8f:07:b3:e2:2c:c7:37:44:06:4e:0b:f8:
57:b8:4c:e9:75:13:57:4a:ab:57:8b:9f:8a:6d:d3:
fb:e1:4c:fa:89:d7:e2:60:0b:47:67:c9:6c:51:01:
21:42:44:d8:82:32:c9:6e:11:f2:0c:50:15:b0:db:
9a:32:94:06:e6:bb:c5:97:18:06:63:fb:64:40:58:
0a:79:21:82:7b:3f:71:40:f6:4e:e0:61:a7:5d:6a:
8a:de:6d:6f:7a:91:09:b6:9a:04:4a:24:01:07:fe:
0e:95:a2:b1:41:0a:cd:25:74:87:9d:c1:8d:be:f3:
69:54:df:4c:32:1e:f0:8e:76:cc:96:9d:14:76:40:
5d:48:8c:e2:9e:c4:5c:9b:a1:0c:0b:88:58:fe:12:
b7:cf:73:4b:d5:1d:d4:98:db:cd:84:92:a8:08:c2:
cd:8b:b8:53:e0:2e:dc:aa:6b:3e:c2:5c:44:21:62:
f9:f6:7f:c0:c6:34:b1:30:b5:10:19:7b:61:c7:ca:
79:58:22:6e:9e:6a:23:54:d7:3b:f7:4d:66:9a:25:
3c:be:b8:30:5e:5d:f9:9d:16:f7:d5:50:a1:8a:b9:
fd:8d:9a:92:f6:0e:6c:3e:a3:83:b0:dd:a2:dc:af:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:D3:FD:E5:13:A4:98:FC:54:0D:FB:3E:6C:D2:50:BB:DF:9C:2B
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:27:d5:f5:f5:18:0b:f9:ab:5c:98:98:ab:55:08:22:58:07:
81:55:c0:2b:85:60:0e:0e:d5:4b:9a:11:0e:3d:e5:6b:56:24:
64:a0:56:2b:fe:1d:cb:a1:45:2f:c4:bc:26:6a:57:41:45:3b:
07:fe:f6:30:17:c2:40:79:28:8d:2f:37:4d:79:d2:36:4d:9d:
a4:64:55:3a:e6:b4:9a:39:57:a3:9c:c6:3d:ef:e0:2f:67:0e:
f2:f9:30:00:d4:aa:86:5c:ca:e4:41:ec:84:38:a7:3d:25:9a:
0c:ff:e4:f3:91:c4:0f:17:a8:e0:77:ac:7a:51:82:23:47:fe:
95:56:5a:51:c1:82:3a:e2:b9:58:6b:f6:f5:2a:68:b8:bc:19:
58:a7:0b:71:a6:71:92:eb:88:12:89:e7:49:ca:17:8e:f4:29:
38:ed:8a:ee:f1:83:0b:b7:a1:b0:25:4f:64:bb:67:02:11:22:
38:78:97:70:39:f6:e2:cf:13:e4:1a:f1:7c:c0:6b:3d:66:41:
b0:8a:7e:17:07:d3:4b:c7:e0:19:58:b6:ab:7f:7c:00:9d:9b:
4b:8e:39:d8:ce:cb:ed:f4:5e:c0:20:93:1b:97:47:18:ef:53:
76:b8:02:15:97:18:0c:67:9b:8b:cc:8a:60:f7:25:6d:a7:40:
80:bb:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:38 2026 by rpki-client